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REMARKS 

The Office Action dated December 16, 2006, has been 

^&eived and carefully considered. In this response, claims 17- 

s? and 27 have been canceled. 

THE ALLOWANCE/ ALLOWABILITY OF CLAIMS 1-16 AND 23-26 
% ' " — ~ 

Applicant notes with appreciation the indication on page 2 
£ the Office Action that claims 1-16 and 23-26 are allowable. 



r S* THE PATENTABILITY REJECTION OF CLAIMS 17-22 AND 27 

One page 2 of the Office Action, claims 17-22 and 27 were 

^-ejected as being directed to non-statutory subject matter* 

although Applicant disagrees with this rejection, Application 
nonetheless canceled claims 17-22. and 27, 
In view of the above, Applicant respectfully requests that 

c he above patentablity rejection be withdrawn. 

CONCLUSION 

In view of the foregoing, it is respectfully submitted that 
the present application is in condition for allowance, and an 
aarly indication of the same is courteously solicited. The 
-gxaininer is respectfully requested to contact the undersigned by 
telephone at the below listed telephone number., in order to 
expedite resolution of any issues and to expedite passage of the 
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^^esent application to issue, if any comments, questions, or 

^ggestions arise in connection with the present application. 

To the extent necessary, a petition for an extension of 

^jtve under 37 CFR § 1.136 is hereby made. 

Please charge any shortage in fees due in connection with 
^,p e filing of this paper, including extension of time fees, to 
^posit Account No. 50-02 06, and please credit any excess fees 
p the same deposit account. 

Resentfully submitted, 
Williams LLP 




^A/OAF/dja 

^nton & Williams LLP 
^00 K Street, N.W. 
^shington, D.C. 20006-1109 
J^lephone: (202) 955-1500 
^csimile; (202) 778-2201 



By: 

OzYi^ A. Farres 
Registration No. 43,606 



te; February 13, 2007 



PAGE 6/14 ^ RC VD AT 2/13i2007 7:28:05 PM f Eastern Standard Time] * SVR:USPT0-EFXRF-1/3 * DN(S:2738300 * CSfD: * DURATION (mm-ss):04.56 



Patent Application 
Attorney Docket No.: 57983.000033 
Client Reference No . : 13424ROUS02U 

APPENDIX A 

1 (Previously Presented) . A method for preventing 

information losses due to network node failure, the • method 
comprising the steps of: 

operatively connecting at least one backup node to a 

primary node; 

synchronizing the at least one backup node and the primary 

node; 

receiving, from a first endpoint, -ingress traffic in the 
primary node; 

replicating the ingress traffic to the at least one backup 

node; 

outputting, from the primary node, primary egress traffic; 
outputting, from the at least one backup node, backup 

egress traffic; 

determining if the primary node has failed; 

transmitting, to a second endpoint, the primary egress 
traffic if it is determined that the primary node has not 
failed; and 

transmitting, to the second endpoint, the backup egress 
traffic from a selected one of the at least one backup nodes if 
it is determined that the primary node has failed. 



5 
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wherein the backup egress traffic from the selected one of 

the at least one backup nodes replaces the primary egress 

traffic to the second endpoint and the backup node becomes the 

primary node for subsequent traffic. 

2 (Original) . The method of claim 1, wherein the primary node 
and the at least one backup node are network routers. 

3 (Original) . The method of claim 1, wherein the primary node 
and the at least one backup node are security engines for 
receiving encrypted ingress traffic and outputting decrypted 
egress traffic* 

4 (Original) _ The method of claim 1, wherein the step of 
synchronizing the at least one backup node and the primary node 
further comprises the steps of: 

transmitting synchronization information from the primary 
node to the at least one backup node. 

5 (Original), The method of claim 4, wherein the step of 
transmitting synchronization information from the primary node 
t o the at least one backup node further comprises the steps of: 

transmitting at least one checkpoint message from the 
primary node to the at least one backup node, wherein the at 
least one checkpoint message includes static information 

6 
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^elating to the primary node as well as any outstanding session 

context for the primary node. 

6 (Previously Printed) . The method of claim 5, further 

comprising the steps of: 

receiving, from the at least one backup node, a checkpoint 
passage acknowledgment fox each of said at least one checkpoint 
messages; 

determining whether each of the checkpoint message 
acknowledgments was received prior to a change in flow state; 

transmitting a synchronization declaration from the primary. 
n ode to the at least one backup node if it is determined that, 
each of the checkpoint message acknowledgments w as received 
prior to a change in flow state; and ■ 

transmitting at least one new checkpoint message from the 
primary node to the backup node if it is determined that each of 
the checkpoint packet acknowledgments was not received prior to 
a change in flow state. 

7 (Original). The method of claim 4, further comprising the 
steps of: 

periodically assessing synchronization maintenance between 
t tie primary node and the at least one backup node. 
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e (Original). The method of claim 7 

1 CIa ^ 7, wherein the step of 

periodically assessing synchroni?^,^ 

F ^yncnroni2ation maintenance further 

comprises the step of: 

tr^attin, at least a p ortion of internil ^ 
i«fo Wi o n fro, the prlmary node t0 ^ ^ ^ ^ 
n ode sutI1 cient to peimit replicat±on Qf primary traffic ^ 

^Jie at least one backup node. 

9 Ordinal,. *, apparatus for preventing information 
d ue to network node failur., the apparatus comprlsln9 . 

a primary node; 

at least one backup node operatively connected to the 

primary node; 

synchronize means operatively connected to the prxmary 
n cde and the backup node for synchronizing the at least one 
pickup node and the primary node; 

means for receiving ingress traffic ln the primary node 
^om a first endpoint; 

means for replicating the ingress traffic to the at least 
0 ^e backup node; 

means for outputting primary eg£e ss traffic from the 
primary node; 

means for outputting b<3ckup egress traff±c from ^ 
2^ast one backup node; 

8 
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determining means operatively connected to the primary node 
and the at least one backup node for determining whether the 
primary node has failed; 

means for transmitting the primary egress ' traffic from the 
primary node to a second endpoint if the ' determining means 
determine that the primary node has not failed; and 

means for transmitting the backup egress traffic from a 
selected one of the at least one backup nodes to the second 
endpoint if the determining means determine that the primary 
node has failed, 

10 (Original). The apparatus of claim 9, wherein the primary 
node and the at least one backup node are network routers. 

11 (Original). The apparatus of claim 9, wherein the primary 
node and the at least one backup node are security engines for 
receiving encrypted ingress traffic and outputting decrypted 
egress traffic. 

12 (Original). The apparatus of claim 9, wherein the 
synchronizing means further comprise: 

means for transmitting synchronization information from the 
primary node to the at least one backup node. 
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,3 COriginal). Ih . , ppaiatus of ^ Kherein ^ ^ 

transmitting synchronization information further comprise- 

~» f« transmitting at w one checkpoint Mssage ^ 

the primary node to the* *+- *. 

the at least one backup node, wherein the at 

least one checkpoint message includes stat.V • * 

uaes static information 
^elating to the primary node as well *«, 

well as any outstanding session 

context for the primary node. 

. 14 (Previously Presented) . The aODara ,„ e • _ , . 

ine apparatus of claim 13, further 

comprising: 

—n. for receding i n the priMry ^ ^ ^ ^ ^ 
on, bac kup node, . checfcpoint message &Medgiaent ^ ^ 
said at least one checkpoint message; 

secohd determining means for determrn.ng whether each of 

the checkpoint message acknowl B H™ a ^ 

9 acJ <«owledgments was received prior to a 

change in flow state; 

■neans for transmitting . synchroni 2 ation declaration from 
t «e primary node to the at least one backup noae if it is 

determined that each of th«» r-h^^^i t 

the checkpoint message acknowledgments 

w»» received prior to a change in flow state; and 

means for transmitting at least one ne „ checkpo±nt 
from the primary node to the backup no de if it is Qeterm _ d 
t hat each of the checkpoint message acknowledgments was not 
received prior to a change in flow state. 
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15 (Original) . The apparatus of claim 12, further comprising: 

means for periodically assessing synchronization 

maintenance between the primary node and the at least one backup 

node . 

16. (Previously Presented) The apparatus of claim 15/ wherein 
the means for' periodically assessing synchronization maintenance 
further comprise: 

means for transmitting at least a portion of an internal 
state of the primary node to the backup node sufficient to 
permit replication of primary node traffic on the at least one 
backup node. 

17-22 (Canceled) . 

23 {Previously Presented) * The method of claim 1 wherein the 
step of replicating the ingress traffic to the at least one 
backup node comprises simultaneously passing a copy of the 
ingress traffic to the . at least one backup nods. 

24- (Previously Presented) The apparatus of claim 9 wherein 
the means for replicating the ingress traffic to the at least 
one backup node comprises means for simultaneously passing a 
copy of the ingress traffic to the at least one backup node. 
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25 (Previously Amended) » The method of claim 1 wherein the 
ingress and egress traffic comprise session context information. 

26 (Previously Amended) . The apparatus of claim 9 wherein the 
ingress and egress traffic comprise session context information. 

27 (Canceled) * 
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